Lucene search
+L

988 matches found

Positive Technologies
Positive Technologies
•added 2021/03/25 12:00 a.m.•11 views

PT-2021-16542 · Unknown · Slow Motion Editor

Name of the Vulnerable Software and Affected Versions: Slow Motion Editor versions prior to 3.5.18.5 Description: The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent in the Slow Motion Editor. This is due to the use of an unsafe...

7.8CVSS7.5AI score0.00226EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•6 views

CVE-2021-25349: Improper Access Control

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

7.8CVSS5.8AI score0.00226EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•16 views

Slow Motion Editor 安全漏洞

Bodhan, Mandvi Slow Motion Editor is a Bodhan, Mandvi open source application. It is used to create great videos through fast motion, slow motion and reverse video editing. A security vulnerability exists in Bodhan, Mandvi Slow Motion Editor 3.5.18.5, which can be exploited by an attacker to...

7.8CVSS7.4AI score0.00226EPSS
SaveExploits0References1
OSS-Fuzz
OSS-Fuzz
•added 2021/02/28 4:32 a.m.•12 views

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Detailed Report: https://oss-fuzz.com/testcase?key=5318344388509696 Project: kimageformats Fuzzing Engine: honggfuzz Fuzz Target: kimgioheiffuzzer Job Type: honggfuzzasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61b000041235 Crash State:...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/02/27 7:12 p.m.•6 views

kimageformats:kimgio_heif_fuzzer: Heap-buffer-overflow in put_epel_8_fallback

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4616579716349952 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioheiffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/10 12:00 a.m.•4 views

PT-2021-27651

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in specific functions. The functions involved are derive collocated motion vectors,...

5.9AI score
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2021/02/08 3:42 p.m.•8 views

libheif:file-fuzzer: Heap-buffer-overflow in derive_collocated_motion_vectors

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=5196643488759808 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•17 views

Sparkle Motion Mechanize Operating System Command Injection Vulnerability

Sparkle Motion Mechanize is a Ruby-based codebase used by the Sparkle Motion organization to support the Web for automated interactions. Mechanize suffers from an operating system command injection vulnerability that allows the injection of operating system commands using several class methods th...

8.3CVSS7.2AI score0.03507EPSS
SaveExploits0References12
OSS-Fuzz
OSS-Fuzz
•added 2020/12/13 9:23 p.m.•5 views

openh264:decoder_fuzzer: Heap-buffer-overflow in McChromaWithFragMv_c

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5942418067292160 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.9AI score
SaveExploits0
CVE
CVE
•added 2020/12/11 12:51 a.m.•102 views

CVE-2020-28220

CVE-2020-28220 affects Schneider Electric Modicon M258 firmware (all versions before 5.0.4.11) and SoMachine/SoMachine Motion software (all versions). The issue is a CWE-119 memory-bounds vulnerability that can cause a buffer overflow when the length of a file transferred to the webserver is not ...

6.8CVSS6.8AI score0.01063EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2020/12/11 12:00 a.m.•7 views

ACS Motion Control ACS SpiiPlusEC-08 Denial of Service Vulnerability in TCP Protocol

ACS SpiiPlusEC-08 is a motion controller from ACS Motion Control that supports Ethernet communication. A denial of service vulnerability exists in the ACS Motion Control ACS SpiiPlusEC-08 TCP protocol that can be exploited by an attacker to launch a denial of service attack...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/12/11 12:00 a.m.•1 views

PT-2020-16950

Name of the Vulnerable Software and Affected Versions Modicon M258 Firmware versions prior to V5.0.4.11 SoMachine/SoMachine Motion software affected versions not specified Description A buffer overflow issue exists due to improper restriction of operations within the bounds of a memory buffer. Th...

6.8CVSS0.01063EPSS
SaveExploits0References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•3 views

CVE-2020-28220: Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Modicon M258 Firmware All versions prior to V5.0.4.11 and SoMachine/SoMachine Motion software All versions, that could cause a buffer overflow when the length of a file transferred to the...

6.8CVSS6AI score0.01063EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/12/02 12:00 a.m.•13 views

ACS SpiiPlusEC-08 suffers from a denial of service vulnerability (CNVD-2020-70574)

ACS Motion Control is an Israel-based, OEM-oriented supplier of motion controllers and drive solutions for a wide range of high-tech systems in semiconductor manufacturing, laser processing, additive manufacturing, flat panel display manufacturing, electronics assembly, life sciences, and more. A...

7AI score
SaveExploits0
CNVD
CNVD
•added 2020/11/04 12:00 a.m.•13 views

Motion-Project Motion Buffer Overflow Vulnerability

Motion-Project Motion is a software from the Motion-Project team that detects motion signals in videos. A security vulnerability exists in Motion-Project Motion versions 3.2 through 4.3.1 that allows a remote, unauthenticated user to cause a webu.c segmentation error and terminate the main proces...

7.5CVSS6.8AI score0.04364EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2020/10/29 12:00 a.m.•24 views

FreeBSD : motion -- Denial of Service (94ffc0d9-1915-11eb-b809-b42e991fc52e)

cxsecurity.com reports : A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request C Tenable Network Security, Inc. The descriptive text and package checks ...

7.5CVSS7.3AI score0.04364EPSS
SaveExploits1References2
OSV
OSV
•added 2020/10/26 6:15 p.m.•4 views

DEBIAN-CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS7.3AI score0.04364EPSS
SaveExploits1References1
OSV
OSV
•added 2020/10/26 6:15 p.m.•16 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS6.7AI score
SaveExploits0References4
NVD
NVD
•added 2020/10/26 6:15 p.m.•20 views

CVE-2020-26566

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

7.5CVSS0.04364EPSS
SaveExploits1References4
Prion
Prion
•added 2020/10/26 6:15 p.m.•20 views

Design/Logic Flaw

A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request...

5CVSS7.3AI score0.04364EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder